Ethical Hacker/Penetration Tester Principal
Job in
City of Albany, Albany, Albany County, New York, 12201, USA
Listed on 2026-10-16
Listing for:
VGAI Solutions
Full Time
position Listed on 2026-10-16
Job specializations:
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Security Management & Operations
Job Description & How to Apply Below
- Bachelor’s degree in a related software field with 6+ years in a Dev Sec role.
- Previous job background as an engineer and Dev Sec position on a large-scale public enterprise scale application.
- Conduct penetration tests and vulnerability assessments for Java applications and infrastructure.
- Identify security flaws in Java code using automated and manual methods.
- Create and use custom exploits to test application security, simulating attacker tactics.
- Collaborate with Development teams to understand application architecture and find security weaknesses early.
- Collaborate with Testing teams to integrate with manual and automation testing.
- Provide guidance on secure coding and how to fix vulnerabilities.
- Stay updated on Java security threats and best practices.
- Assist in responding to security incidents related to Java vulnerabilities, current published NIST CVE.
- Clearly document and report findings, including technical details, risk assessment, and recommended solutions.
- Communicate findings and recommendations to both technical and non-technical staff.
- Contribute to security policies for Java development and deployment.
- Familiar with MITRE ATT&CK Framework.
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Minimum of 6 years of Development/Security experience
- Experience in Penetration Testing/Ethical Hacking with a focus on Java application security.
- Strong knowledge of Java programming and its security practices as well as scripting experience.
- Proficiency in web application security principles (e.g., OWASP).
- Knowledge of common web vulnerabilities (e.g., SQL injection, XSS) and exploit techniques.
- Experience with penetration testing tools like Burp Suite, Metasploit.
- Familiarity with Fortify on Demand SAST and DAST tools.
- Strong understanding of cryptography and secure communication protocols (e.g., SSL/TLS).
- Excellent problem-solving and analytical skills.
- High ethical standards and confidentiality.
- Certifications such as OSCP, GWAPT, GXPN, GPEN, LPT, CEH, CISSP or other industry security certifications.
- Experience with scripting languages (e.g., Python, Bash).
- Experience with secure code review for Java.
- Familiarity with cloud security testing.
- Experience with mobile application penetration testing.
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×